CSI Security & Compliance 3

Question 1

Which compliance regulation primarily governs the protection of cardholder data in payment processing systems?

Accepted Answer

PCI DSS

Answer

PCI DSS (Payment Card Industry Data Security Standard) sets requirements for protecting cardholder data in payment card environments.

Question 2

During a penetration test on an integrated system, the tester finds an open Telnet port. Why is this a critical security concern?

Accepted Answer

Telnet transmits data including credentials in plaintext

Answer

Telnet sends all data, including usernames and passwords, unencrypted, making it trivial for an attacker to intercept credentials via packet capture.

Question 3

A system integrator is asked to implement multi-factor authentication (MFA). Which combination represents true MFA?

Accepted Answer

PIN and fingerprint scan

Answer

True MFA combines factors from different categories: something you know (PIN) and something you are (fingerprint), satisfying two distinct authentication factors.

Question 4

What is the role of a Certificate Authority (CA) in a Public Key Infrastructure (PKI)?

Accepted Answer

To issue and manage digital certificates that bind public keys to identities

Answer

A CA is a trusted entity that issues digital certificates, validating the association between a public key and the identity of its owner.

Question 5

In the context of physical security for integrated systems, what is 'tailgating'?

Accepted Answer

An unauthorized person following an authorized person through a secured door

Answer

Tailgating is a physical security breach where an unauthorized individual gains access to a restricted area by following closely behind an authorized person.

(CSI) Certified System Integrator Practice Test

(CSI) Certified System Integrator Practice Test

CSI Security & Compliance 3